Computer Forensics is one of the fastest growing fields in Information Technology, due to a shortage of qualified, competent people. This introductory course is designed for those without any previous experience in the field. The student will be introduced to basic forensic concepts, and the course will culminate with each student conducting a forensic investigation of a floppy disk and hard drive.

What is computer forensics? The definition we use at Cyber Security Institute is as follows: The preservation, identification, extraction, interpretation, and documentation of computer evidence, to include the rules of evidence, legal processes, integrity of evidence, factual reporting of the information found, and providing expert opinion in a court of law or other legal proceeding if necessary as to what was found.

Computer Forensics does not just deal with criminal matters or law enforcement. Situations where the skills of a computer forensics analyst are needed arise everyday - divorces, civil disputes, bankruptcies, medical malpractice, wills - the list goes on and on. Please refer to the document "What Is Computer Forensics?" http://www.cybersecurityinstitute.biz/forensics.htm for an expanded definition.

This course is open only to U.S. citizens who no criminal record. Non-U.S. and international students are evaluated on a case-by-case basis as deemed appropriate by the Authorized Training Provider. Students must have intermediate to expert DOS experience, and be able to navigate unaided throughout a computer system with multiple hard drives and partitions from a command line environment. Students must also agree with and abide by a security/forensics course agreement and a statement of ethics, which will be presented for signature during the first class.